Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rkrFvYEXhtvrgw0UbkzWPwv-DWg.roa
File: rkrFvYEXhtvrgw0UbkzWPwv-DWg.roa (raw, json)
Hash identifier: t9SQsNQkphPE0lmN24VRLMBCb8gijgAMiNtoU7msUyM=
Subject key identifier: AE:4A:C5:BD:81:17:86:DB:EB:83:0D:14:6E:4C:D6:3F:0B:FE:0D:68
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018909B0A26128D5CE30E649180B145B5899
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rkrFvYEXhtvrgw0UbkzWPwv-DWg.roa
Signing time: Fri 30 Jun 2023 00:25:18 +0000
ROA not before: Fri 30 Jun 2023 00:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:09:b0:a2:61:28:d5:ce:30:e6:49:18:0b:14:5b:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jun 30 00:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae4ac5bd811786dbeb830d146e4cd63f0bfe0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:4d:7a:01:bd:a3:84:3d:79:4f:79:ef:8d:
28:5a:32:1b:0a:ed:1b:be:ac:e0:7e:76:f5:30:76:
66:d9:58:b2:01:7b:61:76:f9:fd:d2:01:4b:75:2b:
df:43:66:4b:8f:a2:d9:7a:50:b0:d5:91:c7:c2:04:
3f:f4:85:a3:b3:b2:b6:e9:b7:28:17:5d:c0:06:78:
0d:12:97:5c:53:26:72:55:8d:96:08:e9:a5:b6:5a:
b5:54:26:52:d0:b9:32:9e:f9:f5:37:b3:b9:b0:0b:
bb:f0:45:35:d3:fe:bb:80:13:16:ec:09:04:49:9d:
4e:c1:24:ff:c2:91:9b:d5:f5:a5:90:fa:e8:b1:93:
70:87:fd:68:29:96:31:99:92:2e:6e:80:52:24:e6:
a1:67:c5:03:00:34:e6:17:a3:ac:ec:f1:b3:53:f3:
f0:61:cf:05:8b:f1:ee:44:51:8e:26:d7:29:38:3d:
53:03:6c:9a:72:f3:36:e6:4c:42:4d:0b:fa:2b:f3:
0b:99:53:9d:6a:f2:1d:98:3f:e1:85:88:71:28:4e:
97:1c:a8:55:b3:2f:8c:70:40:32:53:09:37:c1:96:
e5:bf:ba:77:c0:4a:e6:f2:ef:e3:87:8d:17:ca:87:
20:ea:03:6e:ff:22:66:52:e9:15:28:57:c8:fd:2b:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4A:C5:BD:81:17:86:DB:EB:83:0D:14:6E:4C:D6:3F:0B:FE:0D:68
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rkrFvYEXhtvrgw0UbkzWPwv-DWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.112.0/23
146.247.118.0/23
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d8:3f:79:20:3d:38:41:86:c6:41:cc:2c:13:51:de:d6:fb:
0e:9e:39:9d:58:e1:5b:11:57:3c:14:f8:3d:06:4a:ab:4d:29:
11:2a:e2:6d:28:78:49:86:24:06:66:9d:4a:aa:a2:54:fb:61:
42:85:ad:a4:f4:5f:78:ee:0b:9d:6b:90:91:9d:11:d4:eb:a6:
3f:75:7a:38:0b:cb:51:39:cd:9b:39:5e:46:6a:ed:ad:4e:1a:
e0:86:e1:b8:2a:22:96:93:23:58:94:a6:53:f1:d6:85:d6:45:
4e:4c:31:7d:af:a0:28:45:1f:34:d9:61:6b:ee:d7:e8:b0:a3:
67:60:ac:89:b3:51:fb:df:89:15:ef:1e:60:5b:dd:8f:73:05:
71:4a:20:20:fa:23:be:d2:f1:d5:f0:ef:d9:30:cf:8f:29:6a:
37:09:f8:1b:c0:7e:f9:a7:c8:8c:21:c8:a9:c3:87:4f:99:92:
8e:83:2d:7c:e7:99:47:af:3d:00:df:82:43:2d:1f:05:24:d5:
0d:d3:c5:e7:37:cc:dc:1d:de:84:63:74:34:78:88:01:57:ab:
6c:3c:2d:14:6f:3b:8d:16:98:0d:d2:5f:d0:98:59:29:bc:ff:
42:b0:98:fa:1b:b5:2e:87:5a:3d:4b:99:75:04:1b:3a:1c:a6:
c8:82:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org